The UK’s data watchdog has said shopkeepers must not put up photos of suspected shoplifters in stores as is could impinge on their rights under GDPR laws.